Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/bc5f15-58ae-4df0-9c6d-e7ad73bbcc89/1/Ay1SsyOaHOPN00MxNIzngN3xZMA.mft
File: Ay1SsyOaHOPN00MxNIzngN3xZMA.mft (raw, json)
Hash identifier: XBN43/XMvo5VlioWHOxf9qV7X88peycfBLLigGqHoGg=
Subject key identifier: 5E:FA:EE:17:A8:C5:9C:C8:1A:AD:A4:B1:0D:7D:80:AA:F9:61:E3:E3
Authority key identifier: 03:2D:52:B3:23:9A:1C:E3:CD:D3:43:31:34:8C:E7:80:DD:F1:64:C0
Certificate issuer: /CN=032d52b3239a1ce3cdd34331348ce780ddf164c0
Certificate serial: 019F8F1020B8BEEAD1E9DD729DCF2A0388FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ay1SsyOaHOPN00MxNIzngN3xZMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/bc5f15-58ae-4df0-9c6d-e7ad73bbcc89/1/Ay1SsyOaHOPN00MxNIzngN3xZMA.mft
Manifest number: 0A76
Signing time: Thu 23 Jul 2026 13:00:26 +0000
Manifest this update: Thu 23 Jul 2026 13:00:26 +0000
Manifest next update: Fri 24 Jul 2026 13:00:26 +0000
Files and hashes: 1: Ay1SsyOaHOPN00MxNIzngN3xZMA.crl (hash: Kac03NkzY9SOxl8yEhaIsI7GqqcT+Pe8GfoD3MABel0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/bc5f15-58ae-4df0-9c6d-e7ad73bbcc89/1/Ay1SsyOaHOPN00MxNIzngN3xZMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/bc5f15-58ae-4df0-9c6d-e7ad73bbcc89/1/Ay1SsyOaHOPN00MxNIzngN3xZMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ay1SsyOaHOPN00MxNIzngN3xZMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 13:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:10:20:b8:be:ea:d1:e9:dd:72:9d:cf:2a:03:88:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=032d52b3239a1ce3cdd34331348ce780ddf164c0
Validity
Not Before: Jul 23 13:00:26 2026 GMT
Not After : Jul 24 13:00:26 2026 GMT
Subject: CN=5efaee17a8c59cc81aada4b10d7d80aaf961e3e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:98:cd:69:2f:0f:ba:95:ee:8c:6a:4c:b4:2d:
7e:8d:b8:c1:c0:69:87:23:1a:c4:f8:56:a7:51:e7:
0c:fc:62:7e:7e:1b:97:5c:4f:2b:2b:7b:d4:55:ad:
83:d0:32:7c:d8:87:9b:07:ed:f9:eb:ff:12:e1:23:
5a:ce:ce:76:5a:2b:e9:75:45:60:0a:6d:5f:9b:ef:
e7:c6:e0:65:43:5a:aa:82:8d:fb:8f:3f:6e:1b:32:
95:85:bf:90:e3:7e:3b:54:c8:c7:ec:b7:2e:ca:53:
db:54:f2:54:6b:e5:0f:d4:41:da:05:7d:c6:29:fe:
ec:6c:2a:41:c1:73:03:d7:84:f5:3b:3f:17:95:8d:
0f:8a:c9:5b:53:6c:60:f8:c5:d2:97:e8:58:d5:41:
0e:81:60:14:57:9f:9b:ae:13:8c:9b:ea:d5:fd:b0:
24:c2:c8:08:db:54:98:73:f4:0d:34:c6:87:4d:f0:
39:bc:86:02:b4:5c:98:8f:91:10:07:d2:ba:07:f3:
e9:5e:50:f5:00:04:d3:86:70:e2:74:3a:d5:05:2e:
ea:23:8d:a9:67:06:14:c7:7b:44:46:c6:35:c9:be:
d1:eb:8c:fc:b3:ad:85:40:01:db:1a:98:33:f3:66:
64:36:ac:eb:9e:be:6c:9e:4c:b7:ef:a0:e6:00:40:
66:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:FA:EE:17:A8:C5:9C:C8:1A:AD:A4:B1:0D:7D:80:AA:F9:61:E3:E3
X509v3 Authority Key Identifier:
keyid:03:2D:52:B3:23:9A:1C:E3:CD:D3:43:31:34:8C:E7:80:DD:F1:64:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ay1SsyOaHOPN00MxNIzngN3xZMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/bc5f15-58ae-4df0-9c6d-e7ad73bbcc89/1/Ay1SsyOaHOPN00MxNIzngN3xZMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/bc5f15-58ae-4df0-9c6d-e7ad73bbcc89/1/Ay1SsyOaHOPN00MxNIzngN3xZMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:91:31:c9:64:fb:aa:00:0a:f6:f3:bd:bc:c5:d4:85:c2:1c:
a6:76:5d:37:08:b6:87:91:b8:ee:12:5e:5a:a7:9e:61:32:68:
8a:b1:77:3c:b8:86:6f:35:38:31:b3:bc:b9:c7:3a:34:cc:56:
c7:4c:70:6f:51:0a:56:71:b2:60:4e:f7:ed:48:9d:cd:ac:94:
73:77:03:7b:0f:ff:9a:bd:b3:96:80:ae:1b:91:30:ac:20:f3:
95:ca:ae:a2:b0:ff:82:cd:e7:04:07:8f:5e:7a:63:19:c0:d2:
e8:bf:77:96:9a:2a:ea:a4:83:54:32:d5:10:0d:2b:c3:6a:dd:
99:49:ad:29:bb:8b:35:20:6c:db:67:47:9b:e4:39:cd:2b:ce:
ab:fd:47:df:f8:1b:f5:20:50:2e:ed:cb:12:fc:d2:60:16:48:
be:75:09:e3:5b:86:65:15:0f:6f:08:1d:99:d7:d3:49:68:45:
b9:1b:c3:e2:f2:7e:7f:b8:80:6f:9a:52:dc:df:1e:f8:d2:26:
d4:a8:37:4a:17:65:e3:0e:fd:be:49:5c:0a:0b:68:74:f2:2a:
45:7a:ab:c9:15:2a:60:a0:52:e4:02:c0:e9:d0:5e:40:f5:75:
d0:b4:65:8e:7b:6f:2b:4a:fe:22:3d:cc:a8:ea:d1:31:b4:06:
f5:ef:cb:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+PECC4vurR6d1ync8qA4j9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzMmQ1MmIzMjM5YTFjZTNjZGQzNDMzMTM0OGNlNzgwZGRm
MTY0YzAwHhcNMjYwNzIzMTMwMDI2WhcNMjYwNzI0MTMwMDI2WjAzMTEwLwYDVQQD
Eyg1ZWZhZWUxN2E4YzU5Y2M4MWFhZGE0YjEwZDdkODBhYWY5NjFlM2UzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl5jNaS8PupXujGpMtC1+jbjBwGmH
IxrE+FanUecM/GJ+fhuXXE8rK3vUVa2D0DJ82IebB+356/8S4SNazs52WivpdUVg
Cm1fm+/nxuBlQ1qqgo37jz9uGzKVhb+Q4347VMjH7LcuylPbVPJUa+UP1EHaBX3G
Kf7sbCpBwXMD14T1Oz8XlY0PislbU2xg+MXSl+hY1UEOgWAUV5+brhOMm+rV/bAk
wsgI21SYc/QNNMaHTfA5vIYCtFyYj5EQB9K6B/PpXlD1AATThnDidDrVBS7qI42p
ZwYUx3tERsY1yb7R64z8s62FQAHbGpgz82ZkNqzrnr5snky376DmAEBmrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF767heoxZzIGq2ksQ19gKr5YePjMB8GA1UdIwQY
MBaAFAMtUrMjmhzjzdNDMTSM54Dd8WTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXkxU3N5T2FIT1BOMDBNeE5Jem5nTjN4Wk1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9iYzVmMTUtNThhZS00ZGYwLTljNmQt
ZTdhZDczYmJjYzg5LzEvQXkxU3N5T2FIT1BOMDBNeE5Jem5nTjN4Wk1BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS9iYzVmMTUtNThhZS00ZGYwLTljNmQtZTdhZDczYmJjYzg5
LzEvQXkxU3N5T2FIT1BOMDBNeE5Jem5nTjN4Wk1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIpExyWT7
qgAK9vO9vMXUhcIcpnZdNwi2h5G47hJeWqeeYTJoirF3PLiGbzU4MbO8ucc6NMxW
x0xwb1EKVnGyYE737UidzayUc3cDew//mr2zloCuG5EwrCDzlcquorD/gs3nBAeP
XnpjGcDS6L93lpoq6qSDVDLVEA0rw2rdmUmtKbuLNSBs22dHm+Q5zSvOq/1H3/gb
9SBQLu3LEvzSYBZIvnUJ41uGZRUPbwgdmdfTSWhFuRvD4vJ+f7iAb5pS3N8e+NIm
1Kg3Shdl4w79vklcCgtodPIqRXqryRUqYKBS5ALA6dBeQPV10LRljntvK0r+Ij3M
qOrRMbQG9e/LzA==
-----END CERTIFICATE-----
Generated at Thu Jul 23 22:56:08 2026 by rpki-client